200-301: Cisco Certified Network AssociateDemo

By Cisco · Question Mode

QuestionQ302

Network Access

Question Image

Refer to the exhibit. A network engineer needs to block HTTP access to the web server for every computer in VLAN 20. All other computers must still be able to access the web server. Which configuration, when applied to switch A, accomplishes this task?

  • A
  • B
  • C
  • D
Explanation

An inbound extended ACL on VLAN 20 denies TCP port 80 traffic to host 10.30.0.100 before permitting all other IP traffic. Inbound ACLs filter packets as they arrive at the interface, ACL entries are evaluated in order until the first match, and an explicit permit ip any any prevents the implicit deny from blocking VLAN 20's other traffic. Applying the ACL only to the VLAN 20 interface leaves traffic from the other VLANs able to reach the server.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!